93
System Security and Emergency Preparedness Plan (SSEPP) [Transit Agency Name] i

o Dot Security Plan Template

Embed Size (px)

DESCRIPTION

Template

Citation preview

Page 1: o Dot Security Plan Template

System Security and Emergency Preparedness Plan

(SSEPP)

[Transit Agency Name]

Date:

Revision:

i

Page 2: o Dot Security Plan Template

SSEPP Program Plan Revision History

Date Revision Description of Change

4-18-02 0 Initial SSEPP

ii

Page 3: o Dot Security Plan Template

Reference Documents

The following are resources used to develop the policies and procedures documented in this SSEP Program Plan:

Title: Transit System Security Program Planning Guide Author(s): John Balog and Anne SchwarzYear: 1994 Sponsoring Agency: Federal Transit Administration (FTA) Volpe Report #: DOT-VNTSC-FTA-94-01 DOT Number: FTA-MA-90-7001-94-1 NTIS Number: PB94-161973 Available: http://www.transit-safety.dot.gov

Title: Transit Security Handbook Author(s): Annabelle Boyd and James CatonYear: 1998Sponsoring Agency: Federal Transit Administration (FTA)Volpe Report #: DOT-VNTSC-FTA-98-03 DOT Number: FTA-MA-90-9007-98-1 NTIS Number: PB98-157761 Available: http://www.transit-safety.dot.gov

Title: Critical Incident Management GuidelinesAuthors: Annabelle Boyd and James CatonYear: 1998Sponsoring Agency: Federal Transit Administration (FTA)Volpe Report #: DOT-VNTSC-FTA-98-05 DOT Number: FTA-MA-26-7009-98-1 Available: http://www.transit-safety.dot.gov

Title: Transit Security Procedures Guide Author(s): John Balog and Anne SchwarzYear: 1996 Sponsoring Agency: Federal Transit Administration (FTA) Volpe Report #: DOT-VNTSC-FTA-94-08 DOT Number: FTA-MA-90-7001-94-2 9Available: http://www.transit-safety.dot.gov

Title: Emergency Preparedness for Transit TerrorismAuthors: Annabelle Boyd and John P. Sullivan Year: 1997Sponsoring Agency: Transportation Research BoardReport Number Transit Cooperative Research Program Synthesis Number 27Web site: http://nationalacademies.org/trb/publications/tcrp/tsyn27.pdf

iii

Page 4: o Dot Security Plan Template

Title: Perspectives on Transit Security in the 1990s: Strategies for Success Author(s): Annabelle Boyd and Patricia Maier Year: 1996 Sponsoring Agency: Federal Transit Administration (FTA) Volpe Report #: DOT-VNTSC-FTA-96-02 DOT Number: FTA-MA-90-7006-96-01 NTIS Number: PB96-185871 Available: http://www.transit-safety.dot.gov

Title: Transit Security in the 90's Author(s): Kathryn Powell and Annabelle BoydYear: 1996 Sponsoring Agency: Federal Transit Administration (FTA) Keywords: Local transit-Security measures Volpe Report #: DOT-VNTSC-FTA-96-11 DOT Number: FTA-MA-26-9009-97-01 NTIS Number: PB97-146989 Available: http://www.transit-safety.dot.gov

Title: Protecting Surface Transportation Systems and Patrons from Terrorist Activities – Volume OneAuthor: Brian Michael Jenkins Year: January 1997 Sponsoring Agency: San Jose University, Mineta International Institute for Surface Transportation Policy Studies Report Number: IISTPS 97-4Full text available at: http://www.transweb.sjsu.edu/publications/terrorism/Protect.htm

Title: Protecting Surface Transportation Systems Against Terrorism and Serious Crime – 2001 UpdateAuthor: Brian Michael Jenkins Year: October 2001Sponsoring Agency: San Jose University, Mineta International Institute for Surface Transportation Policy Studies Report Number: IISTPS 01-7Full text available at: http://www.transweb.sjsu.edu/publications/terrorism/Protect.htm

Title: Improving Transit Security Authors: Jerome A. Needle and Renee M. Cobb, J.D, Year: 1997Sponsoring Agency: Transportation Research BoardReport Number Transit Cooperative Research Program Synthesis Number 21Web site: http://nationalacademies.org/trb/publications/tcrp/tsyn21.pdf

iv

Page 5: o Dot Security Plan Template

Glossary of Terms

Emergency: A situation which is life threatening to passengers, employees, or other interested citizens or which causes damage to any transit vehicle or facility or results in the significant theft of services and reduces the ability of the system to fulfill its mission.

Fatality: A transit-caused death that occurs within 30 days of the transit incident.

Injury: Any physical damage or harm to a person that requires immediate medical attention and hospitalization.

Safety: Freedom from danger.

Security: Freedom from intentional danger

Security breach: An unforeseen event or occurrence that endangers life or property and may result in the loss of services or system equipment.

Security incident: An unforeseen event or occurrence that does not necessarily result in death, injury, or significant property damage but may result in minor loss of revenue.

Security threat: Any source that may result in a security breach, such as vandal or disgruntled employee; or an activity, such as an assault, intrusion, fire, etc.

System: A composite of people (employees, passengers, others), property (facilities and equipment), environment (physical, social, institutional), and procedures (standard operating, emergency operating, and training) which are integrated to perform a specific operational function in a specific environment.

System security: The application of operating, technical, and management techniques and principles to the security aspects of a system throughout its life to reduce threats and vulnerabilities to the most practical level through the most effective use of available resources.

System securitymanagement: An element of management that defines the system security requirements

and ensures the planning, implementation, and accomplishments of system security tasks and activities.

System security program: The combined tasks and activities of system security management and

system security analysis that enhance operational effectiveness by satisfying the security requirements in a timely and cost-effective manner through all phases of a system life cycle.

v

Page 6: o Dot Security Plan Template

Threat: Any real or potential condition that can cause injury or death to passengers or employees or damage to or loss of transit equipment, property, and/or facilities.

Threat analysis: A systematic analysis of a system operation performed to identify threats and make recommendations for their elimination or mitigation during all revenue and non revenue operation.

Threat probability: The probability a threat will occur during the plan's life. Threat probability may be expressed in quantitative or qualitative terms. An example of a threat-probability ranking system is as follows: (a)frequent, (b) probable, (c) occasional, (d) remote, (e) improbable, and (f) impossible.

Threat resolution: The analysis and subsequent action taken to reduce the risks associated with an identified threat to the lowest practical level.

Threat severity: A qualitative measure of the worst possible consequences of a specific threat:

Category 1 - Catastrophic. May cause death or loss of a significant component of the transit system, or significant financial loss.

Category 2 - Critical. May cause severe injury, severe illness, major transit system damage, or major financial loss.

Category 3 - Marginal. May cause minor injury or transit system damage, or financial loss.

Category 4 - Negligible. Will not result in injury, system damage, or financial loss.

Unsafe conditionor act: Any condition or act that endangers life or property.

Vulnerability: Characteristics of passengers, employees, vehicles, and/or facilities that increase the probability of a security breach.

vi

Page 7: o Dot Security Plan Template

Table of Contents

Section 1: Introduction to System Security and Emergency Preparedness.....................................11.1 Background....................................................................................................................21.2 Authority........................................................................................................................21.3 Purpose, Goals and Objectives of SSEP Program.........................................................3

1.3.1 Purpose....................................................................................................................41.3.2 Goals........................................................................................................................41.3.3 Objectives................................................................................................................4

1.4 Scope..................................................................................................................................5Section 2: Transit System Description............................................................................................6

2.1 Organizational Structure................................................................................................72.2 Operating Characteristics and Service...........................................................................8

2.2.1 Service Area.............................................................................................................82.2.2 Service Design.........................................................................................................8

2.3 Vehicles and Facilities...................................................................................................92.4 Measures of Service.....................................................................................................10

Section 3: SSEP Program Roles and Responsibilities...................................................................113.1 Philosophy...................................................................................................................123.2 Division of Responsibilities.........................................................................................12

3.2.1 All Personnel.........................................................................................................123.2.2 Executive Director.................................................................................................133.2.3 SSEP Program Point of Contact (POC).................................................................133.2.4 Vehicle Accident Prevention Committee (VAP)...................................................143.2.5 Supervisors............................................................................................................153.2.6 Drivers...................................................................................................................163.2.7 Other Personnel.....................................................................................................16

3.3 Responsibility Matrices...............................................................................................173.3.1 System Security Matrix.........................................................................................193.3.2 Emergency Preparedness Matrix...........................................................................20

3.4 Existing SSEP Capabilities and Practices........................................................................213.5 Training and Exercising...................................................................................................223.6 Coordination with Local Public Safety Agencies............................................................223.7 Coordination with Other Transit Agencies......................................................................22

Section 4: Threat and Vulnerability Resolution Process...............................................................234.1 Threat and Vulnerability Identification.......................................................................244.2 Threat and Vulnerability Assessment..........................................................................25

Section 5: Evaluation and Modification of the SSEPP..................................................................285.1 Evaluation....................................................................................................................29

5.1.1 Internal...................................................................................................................295.1.2 External..................................................................................................................29

5.2 Modification and Update.............................................................................................29

vii

Page 8: o Dot Security Plan Template

Section 1: Introduction to System Security and Emergency Preparedness

1.1 Background1.2 Authority1.3 Purpose, Goals, Objectives1.4 Scope

1

Page 9: o Dot Security Plan Template

1.1 Background

The terrible tragedy of September 11, combined with nation’s continuing war on terrorism, has created a heightened threat environment for public transportation. In this new environment, the vulnerabilities of public agencies and the communities they serve to acts of terrorism and extreme violence have greatly increased. Threat assessments issued by the Federal Bureau of Investigation (FBI) have consistently placed public transportation at the top of the critical infrastructure protection agenda, along with airports, nuclear power plants, and major utility exchanges on the national power grid.  To establish the importance of security and emergency preparedness in all aspects of our organization, [NAME OF TRANSIT AGENCY] has developed this System Security and Emergency Preparedness (SSEP) Program Plan. This SSEP Program Plan outlines the process to be used by [NAME OF TRANSIT AGENCY] to make informed decisions that are appropriate for our operations, passengers, employees and communities regarding the development and implementation of a comprehensive security and emergency preparedness program. As a result of this program, [NAME OF TRANSIT AGENCY] hopes to achieve not only an effective physical security program, but also to enhance our coordination with the local public safety agencies in our service area. Improved communication will increase their awareness of our resources and capabilities, and improve our readiness to support their efforts to manage community-wide emergencies.  In order to be effective, the activities documented in this SSEP Program Plan focus on establishing responsibilities for security and emergency preparedness, identifying our methodology for documenting and analyzing potential security and emergency preparedness issues, and developing the management system through which we can track monitor our progress in resolving these issues.

1.2 Authority

The authority for implementing the SSEP Program Plan resides with the [NAME OF TRANSIT AGENCY] Executive Director and the [NAME OF COUNTY TRANSIT BOARD] OR [INSERT OTHER ORGANIZATION]. This SSEP Program Plan has been developed in cooperation with the Ohio Department of Transportation (ODOT), Office of Transit’s System Security and Emergency Preparedness Training and Technical Assistance Program. This Program supports our efforts to address requests from the Governor of the State of Ohio and the Administrator of the Federal Transit Administration (FTA) to review our current levels of protection and to integrate security and emergency preparedness more fully into our operations.

2

Page 10: o Dot Security Plan Template

1.3 Purpose, Goals and Objectives of SSEP Program

This Program demonstrates our process for addressing system security and emergency preparedness:

System Security – The application of operating, technical, and management techniques and principles to the security aspects of a system throughout its life to reduce threats and vulnerabilities to the most practical level through the most effective use of available resources.

Emergency Preparedness – A uniform basis for operating policies and procedures for mobilizing transit agency and other public safety resources to assure rapid, controlled, and predictable responses to various types of transit and community emergencies.

The SSEP Program will support [NAME OF TRANSIT AGENCY]’s efforts to address and resolve critical incidents on our property and within our community.

Critical Incidents – may include accidents, natural disasters, crimes, terrorism, sabotage, civil unrest, hazardous materials spills and other events that require emergency response. Critical incidents require swift, decisive action from multiple organizations, often under stressful conditions. Critical incidents must be stabilized prior to the resumption of regular service or activities.

Critical incidents often result from emergencies and disasters, but can be caused by any number of circumstances or events. Successful resolution of critical incidents requires the cooperative efforts of both public transportation and community emergency planning and public safety agencies.

[NAME OF TRANSIT AGENCY] has established criteria for a critical incident:

Element of Definition Agency Threshold

Service Interruption Inability to provide service

Duration of Interruption2 hours (system-wide)24 hours (single route)

Injuries and Fatalities2 or more injuries requiring hospitalization1 or more fatalities

Dollar Amount of Property Damage > $10,000

3

Page 11: o Dot Security Plan Template

1.3.1 Purpose

The overall purpose of [NAME OF TRANSIT AGENCY]’s SSEP Program is to optimize -- within the constraints of time, cost, and operational effectiveness -- the level of protection afforded to [NAME OF TRANSIT AGENCY]’s passengers, employees, volunteers and contractors, and any other individuals who come into contact with the system, both during normal operations and under emergency conditions.

1.3.2 Goals

The SSEP Program provides [NAME OF TRANSIT AGENCY] with a security and emergency preparedness capability that will:

1. Ensure that security and emergency preparedness are addressed during all phases of system operation, including the hiring and training of agency personnel; the procurement and maintenance of agency equipment; the development agency policies, rules, and procedures; and coordination with local public safety and community emergency planning agencies

2. Promote analysis tools and methodologies to encourage safe system operation through the identification, evaluation and resolution of threats and vulnerabilities, and the on-going assessment of agency capabilities and readiness

3. Create a culture that supports employee safety and security and safe system operation (during normal and emergency conditions) through motivated compliance with agency rules and procedures and the appropriate use and operation of equipment

1.3.3 Objectives

In this new environment, every threat cannot be identified and resolved, but [NAME OF TRANSIT AGENCY] can take steps to be more aware, to better protect passengers, employees, facilities and equipment, and to stand ready to support community needs in response to a major event. To this end, our SSEP Program has five objectives: 

1. Achieve a level of security performance and emergency readiness that meets or exceeds the operating experience of similarly-sized agencies around the nation

2. Increase and strengthen community involvement and participation in the safety and security of our system

3. Develop and implement a vulnerability assessment program, and based on the results of this program, establish a course of action for improving physical security measures and emergency response capabilities

4. Expand our training program for employees, volunteers and contractors to address security awareness and emergency management issues

5. Enhance our coordination with ODOT’s Office of Transit regarding security and emergency preparedness issues

4

Page 12: o Dot Security Plan Template

1.4 Scope

[NAME OF TRANSIT AGENCY]’s SSEP Program Plan is applicable to all aspects of our current service, ensuring that our operations, training, coordination with local public safety agencies, and general security and emergency preparedness planning address concerns resulting from heightened threat levels. Key elements of the SCOPE of our SSEP Program Plan include:

1. An evaluation of our current capabilities to identify and prevent security incidents that may occur on our property

2. Development of a Vulnerability Assessment Program to identify our weaknesses and guide planning activities

3. Improved Physical Security4. Review and expansion of our training program for security and emergency response5. Enhanced emergency planning and procedures development6. Improved coordination with the Public Safety Agencies in our service area7. Improved coordination with ODOT, Office of Transit

5

Page 13: o Dot Security Plan Template

Section 2: Transit System Description

2.1 Organizational Structure2.2 Operating Characteristics and Service2.3 Vehicles and Facilities2.4 Measures of Service

6

Page 14: o Dot Security Plan Template

2.1 Organizational Structure

[Insert org chart if available]

[Identify Name(s), Title(s) and placement within the organization for management and other personnel and identify the structure of the agency, including employees, volunteers, and contractors]

7

Page 15: o Dot Security Plan Template

2.2 Operating Characteristics and Service

2.2.1 Service Area

[Describe service area, including geographic boundaries and unique features]

2.2.2 Service Design

[Identify type(s) of service* provided]

*for example:

Fixed Route Demand Response Route Deviation Checkpoint Service Zone Service Vanpooling Carpooling/Rideshare Taxi Service Other

8

Page 16: o Dot Security Plan Template

2.3 Vehicles and Facilities

[Identify and describe vehicles and facilities (system elements) used by transit agency to provide service]

[In addition to the description of service vehicles and facilities, provide information regarding internal and external security attributes of the identified system elements (e.g., silent alarm buttons, fencing, lighting, burglar and intrusion detection systems, CCTV, etc.)

9

Page 17: o Dot Security Plan Template

2.4 Measures of Service

[Identify key measures* of service for agency]

*for example:

Mode of Service: Demand Response Total Vehicles: 6 Total Trips: 30,693 Total Expenses: $150,929 Revenue Vehicle Miles: 92,021 Revenue Vehicle Hours: 7,119 Cost per Trip: $6.09 Cost per Mile: $2.36 Cost per Hour: $25.80 Passengers per Revenue Mile: 0.49 Passengers per Revenue Hour: 5.02

Measure of Service Indicator

10

Page 18: o Dot Security Plan Template

Section 3: SSEP Program Roles and Responsibilities

3.1 Philosophy3.2 Roles and Responsibilities3.3 Responsibility Matrices3.4 Existing SSEP Capabilities and Practices3.5 Training and Exercising3.6 Local Public Safety Agencies3.7 Other Transit Agencies

11

Page 19: o Dot Security Plan Template

3.1 Philosophy

[NAME OF TRANSIT AGENCY] hopes to ensure that, if confronted with a security event or major emergency, [NAME OF TRANSIT AGENCY] personnel will respond effectively, using good judgment, ensuring due diligence, and building on best practices, identified in drills, training, rules and procedures.

This level of proficiency requires the establishment of formal mechanisms to be used by all [NAME OF TRANSIT AGENCY] personnel to identify security threats and vulnerabilities associated with [NAME OF TRANSIT AGENCY]’s operations, and to develop controls to eliminate or minimize them. The SSEP Program also requires [NAME OF TRANSIT AGENCY]’s process for:

1. Coordinating with local law enforcement and other public safety agencies to manage response to an incident that occurs on a transit vehicle or affects transit operations, and

2. Identifying a process for integrating [NAME OF TRANSIT AGENCY]’s resources and capabilities into the community response effort to support management of a major event affecting the community.

[NAME OF TRANSIT AGENCY] management expects all employees, volunteers and contractors, especially those working directly with passengers, to support the SSEP Program.

3.2 Division of Responsibilities

3.2.1 All Personnel

[NAME OF TRANSIT AGENCY] personnel must understand and adopt their specific roles and responsibilities, as identified in the SSEP Program, thereby increasing their own personal safety and the safety of their passengers, during normal operations and in emergency conditions.

To ensure the success of the SSEP Program, the following functions must be performed by [NAME OF TRANSIT AGENCY] personnel:

1. Immediately reporting all suspicious activity, no matter how insignificant it may seem, to the Executive Director or his/her designee;

2. Immediately reporting all security incidents

3. Using proper judgment when managing disruptive passengers and potentially volatile situations

4. Participation in all security and emergency preparedness training, including drills and exercises

12

Page 20: o Dot Security Plan Template

5. Becoming familiar with, and operating within, all security and emergency preparedness procedures for the assigned work activity

6. Notifying the Executive Director or his/her designee when a physical or mental condition, or required medications or therapies, may impair the ability to perform security or emergency preparedness functions

7. Accurately completing “Employee Statements” on appropriate reports

3.2.2 Executive Director

Under the authority of the [NAME OF TRANSIT AGENCY]’s Board of Directors, the Executive Director has the overall authority to develop and execute the agency’s SSEP Program. Ultimate accountability for implementation of the SSEP Program rests with the [NAME OF AGENCY] Executive Director. In addition, the Executive Director is responsible for the following specific activities:

1. Ensuring that sufficient resources and attention are devoted to the SSEP Program, including:

o Development of standard operating procedures related to employee security dutieso Development and enforcement of safety and security regulations;o Development emergency operating procedures to maximize transit system

response effectiveness and minimizing system interruptions during emergencies and security incidents;

o Provision of proper training and equipment to employees to allow an effective response to security incidents and emergencies

2. Development of an effective notification and reporting system for security incidents and emergencies

3. Designating a Point of Contact (POC) to manage the SSEP Program4. Communicating security and emergency preparedness as top priorities to all employees5. Developing relations with outside organizations that contribute to the SEPP Program,

including local public safety and emergency planning agencies

3.2.3 SSEP Program Point of Contact (POC)

To ensure coordinated development and implementation of the SSEP Program, the Executive Director has designated [INSERT TITLE] as the Security and Emergency Preparedness Point of Contact (POC) for development and implementation of the SSEP Program. The POC, who reports directly to the Executive Director, has been granted the authority to utilize [NAME OF AGENCY] resources to develop the SSEP Program and Plan, to monitor its implementation, and to ensure attainment of security and emergency preparedness goals and objectives.

13

Page 21: o Dot Security Plan Template

The [INSERT TITLE] has the responsibility for overseeing the SEPP Program on a daily basis. The [INSERT TITLE] will be the direct liaison with the agency’s operators and dispatchers, regarding the Program. The [INSERT TITLE] will also serve at the [NAME OF AGENCY]’s primary contact with public agencies. To the extent that liaison is necessary with state and federal agencies, the [INSERT TITLE] will serve as the lead liaison for the agency. The [INSERT TITLE] will also be responsible for the security-related agenda items for Safety/Vehicle Accident Prevention Committee meetings and actions.

In managing this Program, the POC will:

1. Be responsible for successfully administering the SSEP Program and establishing, monitoring, and reporting on the system’s security and emergency preparedness objectives

2. Review current agency safety, security and emergency policies, procedures, and plans, and identifying needed improvements

3. Develop and implement plans for addressing identified improvements4. Coordinate with local public safety agencies, local community emergency planning

agencies, and local human services agencies to address security and emergency preparedness; including participation in formal meetings and committees

5. Develop, publish, and enforce reasonable procedures pertinent to agency activities for security and emergency preparedness

6. Provide adequate driver training and continuing instruction for all employees (and volunteers and contractors) regarding security and emergency preparedness

7. Review new agency purchases to identify security related impacts8. Ensure performance of at least one emergency exercise annually

[The following list of sample procedures and plans to support the implementation of the SSEPP Sample procedures can be found in the corresponding appendices of this document]

Appendix A Vehicle Safety Program ImplicationsAppendix B Security and Emergency Capabilities Checklist and Points of EmphasisAppendix C Security and Emergency ConsiderationsAppendix D Bomb Threat Checklist & Procedures Appendix E Sample Emergency Telephone DirectoryAppendix F Sample Types of Preparation ExercisesAppendix G Tips on Reporting Criminal ActivityAppendix H Sample Emergency Action Plan

3.2.4 Vehicle Accident Prevention Committee (VAP)

Given the nature and scope of [NAME OF AGENCY] operations, it has been determined that a separate Security Committee is unnecessary. As a continuing responsibility of the Vehicle Accident Prevention (VAP)/Safety Committee, there will be a permanent agenda oriented toward security and emergency preparedness matters, ranging from comments on the management of the SSEP Program Plan to liaison with public agencies and feedback from employees. It will also be an ongoing part of the security agenda to determine the level of compliance with agency policies,

14

Page 22: o Dot Security Plan Template

rules, regulations, standards, codes, procedures, and to identify changes or new challenges as a result of incidents or other operating experience.

The [SSEP PROGRAM POC] will be responsible for MANAGING the security agenda during the VAP Committee meetings. When appropriate, members of local fire and police departments will be invited to participate in the security portion of the VAP Committee meetings. The VAP Committee provides the primary mechanism through which the agency:

1. Identifies security conditions and problems at the agency2. Organizes incident investigations and develops and evaluates corrective actions to

address findings3. Obtains data on agency security performance4. Develops strategies for addressing agency security problems5. Coordinates the sharing of security responsibilities and information6. Manages the integration of security initiatives and policies in agency operations7. Evaluates the effectiveness of the security program8. Ensures document reviews and configuration management9. Manages the development and revising of agency policies, procedures, and rulebook10. Coordinates interaction with external agencies

The Committee also ensures that all agency employees, volunteers and contractors:

1. Have a full knowledge of the security program and emergency preparedness programs2. Make security and emergency preparedness a primary concern while on the job3. Cooperate fully with the agency regarding any incident investigation4. Raise security and emergency preparedness concerns

3.2.5 Supervisors

Supervisors are responsible for communicating the transit agency's security policies to all employees, volunteers and contractors. For this reason, supervisors must have full knowledge of all security rules and policies. Supervisors must communicate those policies to [NAME OF TRANSIT AGENCY] operations personnel in a manner that encourages them to incorporate SSEP practices into their everyday work. The specific responsibilities of supervisors include the following. 

1. Having full knowledge of all standard and emergency operating procedures.2. Ensuring that drivers make security and emergency preparedness a primary concern when

on the job.3. Cooperating fully with the SSEP Program regarding any accident investigations as well

as listening and acting upon any security concerns raised by the drivers.4. Immediately reporting security concerns to the [INSERT TITLE].

 In addition, when supporting response to an incident, supervisors are expected to:

1. Provide leadership and direction to employees during security incidents;

15

Page 23: o Dot Security Plan Template

2. Handle minor non-threatening rule violations;3. Defuse minor arguments;4. Determine when to call for assistance;5. Make decisions regarding the continuance of operations;6. Respond to fare disputes and service complaints;7. Respond to security related calls with police officers when required, rendering assistance

with crowd control, victim/witness information gathering, and general on-scene assistance;

8. Complete necessary security related reports;9. Take photographs of damage and injuries;10. Coordinate with all outside agencies at incident scenes

3.2.6 Drivers

In addition to the general responsibilities identified for ALL PERSONNEL, drivers (including volunteers and contractors) are responsible for exercising maximum care and good judgment in identifying and reporting suspicious activities, in managing security incidents, and in responding to emergencies. Each driver will: 

1. Take charge of a security incident scene until the arrival of supervisory or emergency personnel

2. Collect fares in accordance with agency policy (if applicable)3. Attempt to handle minor non-threatening rule violations4. Respond verbally to complaints5. Attempt to defuse minor arguments6. Determine when to call for assistance7. Maintain control of the vehicle8. Report all security incidents to agency dispatch9. Complete all necessary security related reports10. Support community emergency response activities as directed by [NAME OF TRANSIT

AGENCY] policies ands procedures

3.2.7 Other Personnel

Other personnel who support [NAME OF TRANSIT AGENCY] also have responsibilities for the SSEP Program. Dispatchers are expected to:

Receive calls for assistance Dispatch supervisors and emergency response personnel Coordinate with law enforcement and emergency medical service communications

centers Notify supervisory and management staff of serious incidents Establish on-scene communication Complete any required security related reports Provide direction to on-scene personnel

16

Page 24: o Dot Security Plan Template

 Mechanics (including volunteers and contractors) are expected to:

Report vandalism Report threats and vulnerabilities of vehicle storage facilities Provide priority response to safety and security critical items such as lighting Maintain facility alarm systems

Human Resources personnel are responsible for:

Ensuring all pre-employment screening processes are carried out effectively Notifying the Executive Director of employee disciplinary action that may result in the

affected employee becoming a risk to [NAME OF TRANSIT AGENCY] facilities, systems, passengers, employees or other assets

Educating employees on employee ID policy and procedure Communications (Marketing-Customer Service-Community Relations) are responsible for:

Requesting assistance from transit public safety resources as needed for special events Providing insight into potential threats and vulnerabilities through feedback from

customer focus groups and other information sources Designating a Public Information Officer (PIO) for media contact regarding security

incidents and issues Coordinating community oriented policing efforts and programs with officers assigned to

community oriented policing duties by the Public Safety and Security Administrator

3.3 Responsibility Matrices

The operation and maintenance of [NAME OF TRANSIT AGENCY] requires a continual emphasis on security, from the procurement of new systems and equipment, through the hiring and training of employees, to the management of the agency and the provision of service, to the rehabilitation and disposal of existing equipment and facilities. The security function must be supported by an effective capability for emergency response, both to support resolution of those incidents which occur on transit property and those events which affect the surrounding community served by [NAME OF TRANSIT AGENCY]. Tasks have been identified to provide direction in implementation of this SSEP Program. These tasks are on-going and are considered minimum requirements. Tasks are identified in the matrices below. .Also identified are the organizational/participant responsibilities for each task, as designated by the following code: P Primary Task Responsibility. The identified participant(s) is (are) responsible for the

preparation of the specified documentation. S Secondary or Support Responsibility. The identified participant(s) is (are) to provide the

necessary support to accomplish and document the task. R Review/Comment Responsibility. The identified participant(s) is (are) to review and

provide comment on the task or requirement. 

17

Page 25: o Dot Security Plan Template

A Approval Responsibility. The identified participant is to review, comment and subsequently approve the task or requirement.

18

Page 26: o Dot Security Plan Template

System Security Tasks Exec Dir POC VAPOps & Maint

Hum Res

Finance Frequency

Conduct criminal background investigations of employment applicants

R S S P AR

3.3.1 System Security Matrix

[A security task matrix should be presented showing interfaces with other units and the key activities required, including the frequency of those activities]

Frequency: Daily (D); Monthly (M); Quarterly (Q); Yearly (Y); As Required (AR)

19

Page 27: o Dot Security Plan Template

3.3.2 Emergency Preparedness Matrix

[An emergency preparedness task matrix should be presented showing interfaces with other units and the key activities required, including the frequency of those activities]

Frequency: Daily (D); Monthly (M); Quarterly (Q); Yearly (Y); As Required (AR)

Emergency Preparedness Tasks Exec Dir POC VAPOps & Maint

Hum Res

Finance Frequency

20

Page 28: o Dot Security Plan Template

3.4 Existing SSEP Capabilities and Practices

[Summarize methods and procedures, devices, and systems utilized by the transit agency to minimize and respond to security incidents and emergencies*]

*A summary of the existing proactive methods, procedures, and actions to prevent, deter, or minimize security incidents includes:

Emphasis on agency personnel awareness Participation in ODOT training Review of ODOT materials Analysis of security incidences and suspicious activity to determine a proper course of

action including:o Identifying potential and existing problem areas o Developing action planso Implementing the planso Measuring results

Hosting an annual meeting with local law enforcement Annual meeting with local emergency management agency Review of local and transit agency emergency plans Review of FTA documentation on system security and emergency preparedness

A summary of other existing proactive actions and systems to prevent, deter or minimize security incidences includes*:

Conducting security surveys with local law enforcement as a formal threat and vulnerability analysis process

Local police notification/participation in employee discharge and/or discipline process as needed

Evaluation of security/emergency response procedures for completeness and accuracy Participation by local law enforcement in training of new drivers as requested to increase

awareness in security matters Presentations by local police and transit agency personnel to employees, the public or

other groups interested in transit security matters Development and distribution of crime prevention information on agency brochure for

passengers and the public

21

Page 29: o Dot Security Plan Template

3.5 Training and Exercising

[Transit agency should formulate SSEP Program training and exercising plan taking into account the considerations identified below]

1. This section should describe basic and refresher security- and emergency-related training programs for personnel with associated responsibilities

2. Description of all security-related training including refresher for non-security staff provided, including content, duration, grading standards, and maintaining course content for each training class.

3. Description of the process used to identify security-related training needs, to develop and present training classes, and to determine qualifications for instructors.

4. This section should explain how the transit agency determines what training to offer and ensures that all individuals are trained appropriately. This should include a discussion of the required qualifications for instructors

3.6 Coordination with Local Public Safety Agencies

[Identify (by name and contact number) the local law enforcement, fire services, emergency medical services, and emergency planning agencies within the transit agency’s service area]

To support improved emergency and incident preparedness and response, [NAME OF TRANSIT AGENCY] will participate in, at a minimum, one exercise or drill with local public safety organizations in order to:

Review current plans and policies Identify current security and emergency considerations* Develop procedures (if necessary) Establish and maintain ongoing communication

3.7 Coordination with Other Transit Agencies

[Identify (by name and contact number) transit agencies within your county or neighboring counties that may need to be contacted in the event of a critical incident]

22

Page 30: o Dot Security Plan Template

Section 4: Threat and Vulnerability Resolution Process

4.1 Threat and Vulnerability Identification4.2 Threat and Vulnerability Assessment

23

Page 31: o Dot Security Plan Template

Threat and vulnerability assessment offers [NAME OF TRANSIT AGENCY] the ability to identify critical assets and their vulnerabilities to threats, to develop and implement countermeasures, and to monitor and improve program effectiveness. This analysis is guided by clear investigation of three critical questions:

1. Which assets can we least afford to lose?2. What is our responsibility to protect these assets?3. Where do we assume total liability for risk, and where to we transfer risk to local public

responders, technical specialists, insurance companies, and the Federal government?

4.1 Threat and Vulnerability Identification

The primary method used by [NAME OF TRANSIT AGENCY] to identify the threats to the transit system and the vulnerabilities of the system is the collection of incident reports submitted by drivers and supervisors and information provided by local law enforcement and contractors.

Information resources include the following:

Operator incident reports Risk management reports Bus maintenance reports Marketing surveys Passengers' letters and telephone calls Management's written concerns Staff meeting notes Statistical reports Special requests Type of incidents

o Crimes against personso Crimes against propertyo General incidents

Disposition of incidents (same as disposition of call for service) The VAP Committee will review security information resources and determine if additional methods should be used to identify system threats and vulnerabilities such as a formal evaluation program to ensure that security procedures are maintained and that security systems are operable.

Security testing and inspections may be conducted to assess the vulnerability of the transit system. Testing and inspection includes the following three-phase approach:

Equipment preparedness - to ensure that security equipment is operable and in the location where it belongs

Employee proficiency - To ensure that employees know how and when to use security equipment

System effectiveness - To evaluate security by employing security system exercises.

24

Page 32: o Dot Security Plan Template

4.2 Threat and Vulnerability Assessment

The threats which are most likely to occur include the following disruptive incidents:

Drunkenness Disorderly conduct Disputes Minor assaults

Other potential occurrences include:

Fare evasion Loud radios/behavior Smoking Littering Eating/drinking

In the table below, the VAP Committee has mad an assessment concerning how susceptible each system element of [NAME OF TRANSIT AGENCY] is to each listed threat.

25

Page 33: o Dot Security Plan Template

The VAP Committee uses a scale of 1 to 4 for ranking each system element’s vulnerability, one being the lowest (or not vulnerable), to four being the most vulnerable.

Threats

System Elements

[note: the list should be detailed , for example each bus route or each garage. The ‘Threats’ heading should list all crimes that have occurred or may occur on the system]

26

Page 34: o Dot Security Plan Template

Threat and vulnerability resolution, and prevention of incidents: The VAP Committee will review current methods of threat resolution to determine if additional means can be identified to address security risks through three possible alternative approaches:

1. Eliminate2. Mitigate3. Accept

Each approach will be investigated by the VAP Committee to determine and develop a course of action acceptable by [NAME OF TRANSIT AGENCY] management.

27

Page 35: o Dot Security Plan Template

Section 5: Evaluation and Modification of the SSEPP

5.1 Evaluation5.2 Modification & Update

28

Page 36: o Dot Security Plan Template

5.1 Evaluation

5.1.1 Internal

The SSEPP is a “living document” and needs to address issues associated with system security and emergency preparedness on a timely and proactive basis. It is incumbent upon all appropriate personnel of the [NAME OF TRANSIT AGENCY] to constantly evaluate the effectiveness of the SSEPP as well as implementation. The SSEPP POC [ENTER TITLE] will work with the VAP to ensure that the SSEPP is evaluated for effectiveness [ENTER TIME FRAME].

5.1.2 External

The SSEPP POC [ENTER TITLE] will also serve as the agency liaison with external agencies involved in the auditing of existing procedures associated with the SSEPP. [liability insurers may want to audit the implementation of the SSEPP]

5.2 Modification and Update

If during the internal or external evaluations, or based upon SSEP Program findings and activities, the [NAME OF TRANSIT AGENCY] will revise its SSEPP and supporting documentation and training to reflect new practices, policies, and procedures. The VAP is responsible for screening changes and modifications to facilitate ongoing revisions to keep the SSEPP current.

29

Page 37: o Dot Security Plan Template

Appendix A Vehicle Safety Program Implications

Guidelines for Rural and Small Urban Vehicles Safety Program Plans

VEHICLE SAFETY PROGRAM PLAN COVERED POLICIES AND PROCEDURES ADDITIONAL ISSUES IN SSEP PROGRAM

SECTION TITLE

1 MANAGEMENT COMMITMENT Safety Policy Statement

MEMORANDUM AUTHORIZING SYSTEM SAECURITY AND EMERGENCY PREPAREDNESS (SSEP) PROGRAM

2 COMPLIANCE RESPONSIBILITIES

Executive Director Drivers, mechanics and others operating

agency vehicles (and volunteers) Vehicle Accident Prevention (VAP)

Committee Safety incentive program(s)

EXPANDED TO ADDRESS SSEP PROGRAM CREATION OF SSEP PROGRAM POINT OF

CONTACT (POC) NEW RESPONSIBLITIES FOR VAP

COMMITTEE SSEP PROGRAM AGENDA FOR QUARTERLY

VAP COMMITTEE MEETINGS3 DRIVERS – INITIAL

HIRE Qualifications Initial Training

COMMITMENT TO ADDRESS SSEP ISSUES IN HIRING

QUALIFICATIONS

Application Interviews Physical Requirements Age Knowledge of English Driver Licensing Operating Skills Criminal Record Checks Ability to perform simple math Reasonable knowledge of the service area

and ability to read basic maps A road test given by a designated Agency

Supervisor is required A written driving skills test is required

EXPANSION OF NEW HIRE BACKGROUND CHECK

EXPANSION OF NEW HIRE APPLICATION PROCESS TO EMPHASIZE IMPORTANCE OF SAFETY, SECURITY AND EMERGENCY PROCEDURES

INITITAL TRAINING Agency Policies and Procedures Federal and State Guidelines and

ADDITIONAL TRAINING TO ADDRESS SECURITY AWARENESS, REPORTING

30

Page 38: o Dot Security Plan Template

VEHICLE SAFETY PROGRAM PLAN COVERED POLICIES AND PROCEDURES ADDITIONAL ISSUES IN SSEP PROGRAM

SECTION TITLERegulations

Pre and Post Trip Inspections Vehicle Familiarization Basic Operations and Maneuvering Special Driving Conditions Backing Bad Weather Boarding and Alighting Passengers Defensive Driving Course (DDC) Passenger Assistance Training – DRIVE

Training On Road

SUSPICIOUS ACTIVITY, REPORTS AND DOCUMENTATION, AND PRE AND POST TRIP INSPECTIONS

4

DRIVERS – ONGOING SUPERVISION AND TRAINING

Training - refresher/retraining Evaluation and supervision Motor vehicle record checks Annual physical examination Safety meetings Seat-belt usage Discipline/recognition Preventable accidents/injuries

ADDITIONAL REFERSHER TRAINING AND “PROFICIENCY TESTS” FOR KNOWLEDGE OF EMERGENCY PROCEDURES

ADDITIONAL RESPONSIBLITIES FOR SUPERVISION

5 EMERGENCY DRIVING PROCEDURES

Emergency driving procedures Accident causes

o Slippery road surfaceso Driving at nighto Driving through watero Winter drivingo Driving in very hot weather

Vehicle breakdowns and unavoidable

EXPANSION OF EMERGENCY PROCEDURES TO INCLUDE ADDITIONAL SECURITY AND EMERGENCY CONDITIONS

EXPANSION OF EMERGENCY PROCEDURES TO INCLUDE SUPPORT OF COMMUNITY RESPONSE TO A MAJOR EVENT OR EMERGENCY

EMERGENCY TRAINING AND EXERCISING

31

Page 39: o Dot Security Plan Template

VEHICLE SAFETY PROGRAM PLAN COVERED POLICIES AND PROCEDURES ADDITIONAL ISSUES IN SSEP PROGRAM

SECTION TITLEstops

Vehicle fire/evacuation Hold up/robbery Natural disasters

o Tornadoo Flood procedures - vehicle

6 PASSENGER SAFETY

General guidelines Seat-belts Child safety seats Mobility device securement and passenger

restraint systems Difficult passengers Medical condition First aid Bloodborne pathogens/infection control

EXPANSION OF PROCEDURES FOR MANAGING DIFFICULT PASSENGERS

CLARIFICATIONS REGARDING FIRST AID AND BLOODBORNE PATHOGENS/INFECTION CONTROL

7 VEHICLES & EQUIPMENT

Vehicles & equipment Preventive maintenance Program development Preventive maintenance needs Preventive maintenance program Format for preventive maintenance

program for transit vehicles Master vehicle service and repair record –

maintenance history Preventive maintenance intervals

o A Level Inspectiono B Level Inspectiono C Level Inspection

Pre & post trip inspections

EXPANSION OF VEHICLE SECURITY PROCEDURES

EXPANSION OF MAINTENANCE PROCEDURES FOR IDENTIFYING AND REPORTING VANDALISM, SUSPICIOUS SUBSTANCES, OR VEHICLE TAMPERING

EXPANSION OF VEHICLE PROCUREMENT PROCEDURES TO ADDRESS SECURITY TECHNOLOGY

32

Page 40: o Dot Security Plan Template

VEHICLE SAFETY PROGRAM PLAN COVERED POLICIES AND PROCEDURES ADDITIONAL ISSUES IN SSEP PROGRAM

SECTION TITLE Emergency equipment on vehicles and

usage Use of emergency equipment on vehicles Vehicle procurement

o Exterioro Visibilityo Interior

Vehicle security Vehicle safety in and around the shop or

yard

8 ACCIDENT MANAGEMENT

Accident documentation packet Accident notification procedures – driver

responsibility Accident investigation – management

responsibility Accident investigation kit Reconstruction & analysis Drug and alcohol tests Media relations and crises communication

after an accident

ADDITIONAL TOOLS FOR ACCIDENT DOCUMENT PACKET TO ADDRESS SECURITY

ADDITIONAL TOOLS FOR MEDIA RELATIONS

9

INSURANCE CLAIMS AND LITIGATION MANAGEMENT

Dealing with adjusters Dealing with attorneys – ours/theirs

ADDITIONAL CONSIDERATIONS FOR COVERAGE

10

DAY TO DAY OPERATIONS – MONITORING FOR SAFETY

Record keeping Keeping informed

o Websiteso Publications

ADDITIONAL REPORTS FOR SECURITY-RELATED INCIDENTS

33

Page 41: o Dot Security Plan Template

Appendix B

SECURITY BASELINEPLANNING WORKSHEET

Yes No Notes

Has Executive Management accepted responsibility for the management of security vulnerabilities during the design, engineering, construction, testing, start-up and operation of the transit system?Has Executive Management endorsed a policy to ensure that security vulnerabilities are identified, communicated, and resolved (or accepted) through a process that promotes accountability for decision-making?Does your agency have clear and unambiguous lines of authority and responsibility for ensuring that security is addressed at all organizational levels within the operation (including contractors)?Does your agency have access to personnel with security management experience, knowledge, skills, and abilities?Does your agency ensure that resources are effectively allocated to address security considerations? Is the protection of passengers, employees, contractors, emergency responders and the general public a priority whenever activities are planned and performed at the agency?Wherever possible, does your agency guide design, engineering, and procurement activity with an agreed-upon set of security standards and requirements (including design criteria manuals, vehicle specifications, and contracting guidelines)?Does your agency routinely evaluate its capabilities to provide adequate assurance that the public, and employees are protected from adverse consequences?Has your agency committed to developing security mitigation measures to prevent and manage security vulnerabilities?Has your agency appropriately documented its security measures in plans, procedures, training, and in project requirements, specifications and contracts?Do your agency have a formal System Security Program, documented in a System Security Program Plan (Security Plan) ?If “yes,” is the Security Plan current, reflecting current security operations and system configuration?If “no,” does your agency have plans in place to develop a Security Plan?If “no,” prepare a brief list of all activities performed at your agency that address security concerns (for example, include facility access control; procedures for handling difficult people; workplace violence program; bomb threat management plan; procedures for identifying and reporting suspicious activity; facility and vehicle evacuation and search procedures; coordination with local law enforcement, etc.)

ATTACH LIST

34

Page 42: o Dot Security Plan Template

GENERAL EMERGENCY RESPONSE CAPABILITIES

Yes No Notes

Does your agency have an Emergency Plan?Does your agency have Emergency Operating Procedures?Does your agency have an Incident Response Plan for Terrorism, as an appendix to the Emergency Plan or as a separate plan? Does your agency coordinate with local public safety organizations on the development, implementation and review of the Emergency Plan and procedures?Does your Emergency Plan specify use of the Incident Command System?Have your employees been trained in the Emergency Plan and Procedures?Does your agency conduct routine drills, table-tops and refresher training?Does your agency coordinate its drilling and training for emergency response with local public safety organizations?Does your agency conduct briefings of after-action reports to assess performance during the dill or exercise and identify areas in need of improvement?Have members of your agency participated in Domestic Preparedness Training Programs sponsored by the Federal government (FEMA, FBI, DOD, etc.)?PREVIOUS EXPERIENCEHas your agency experienced an emergency in the last 12 months?If” yes,” were you satisfied with the agency’s level of response?Has your agency received a bomb threat in the last 12 months?Has your agency evacuated in its facilities in the last 12 months as the result of a bomb threats?Has your agency conducted a physical search of a facility in response to a bomb threat?

35

Page 43: o Dot Security Plan Template

Points of Emphasis

1. Awareness - Train all security and maintenance personnel to spot suspicious-looking or unfamiliar people or objects.

2. Communication - Teach employees and/or tenants the importance of awareness; encourage them to identify and report anything that appears out-of-the-ordinary.

3. Screening - Develop and implement systems for identifying and controlling visitor access to the building.

4. Inspection - Establish strict procedures for the control and inspection of packages and materials delivered to the building, particularly those intended for critical areas.

5. Procedures - Instruct all personnel, particularly telephone switchboard or reception personnel, on what to do if a bomb threat is received.

6. Surveillance - Instruct security and maintenance personnel to routinely check unattended public or open areas, such as rest rooms, stairways, parking garages and elevators.

7. Lighting - Make sure that all of the facility's access points are well-lit.

8. Systems Awareness - Unexpected interruptions in the building's fire or security systems may not be coincidental; train personnel to identify and address them immediately.

9. Local Authorities - Contact local government agencies to determine their procedures for dealing with bomb threats, search, removal and disposal.

10. Contingency - Assure adequate protection and off-site backup for classified documents, proprietary information, critical records and activities essential to the operation of your business.

36

Page 44: o Dot Security Plan Template

Appendix C

Emergency Response Planning, Coordination, and Training Considerations

1. Emergency Response planning, coordination, and training is formalized and documented, and identifies responsibilities of employees by function

2. Service continuation, restoration / recovery plan developed 3. Emergency drills and table-top exercises scheduled on a regular basis 4. Coordination and training with outside agencies, including:

a. Fire / rescue units; Hospitals; Police; Hazardous materials / Environmental agencies / Regional Office of Emergency Management

5. Media relations / information control procedures and policies established (internal and external to agency)

6. Documentation of drills maintained; drill critiques held; recommendations recorded with follow-up

7. Emergency procedures reviewed by Management on a regular basis and updated as needed

8. Procedure revisions and updates incorporated into evacuation procedures; SOPs developed for signature(s) and distribution

9. Regular assessments of employee proficiency conducted 10. Emergency contacts list developed / current / and responsibility for call-outs identified 11. Emergency evacuation routing for transit vehicles developed 12. Employees issued quick reference guidelines for emergency situations 13. Support systems developed to provide post-incident support to customers and employees 14. Regular functional testing / inspection of emergency support equipment and systems 15. Pre-determination of factors that would require partial or full service shut-down 16. Contingency plans for loss of electrical power and radio or phone communications

37

Page 45: o Dot Security Plan Template

System Security Considerations

1. Security Plan established, which addresses all operations modes and contracted services 2. System security responsibilities and duties established 3. Personal safety awareness/education programs for passengers and employees and

community outreach 4. Security equipment regularly inspected, maintained and functionally tested; including

personal equipment issued to security personnel 5. Contingency SOPs developed; drills and table-top exercises conducted for extraordinary

circumstances: a. Terrorism (including chemical/ biological agents/ weapons of mass destruction);

Riot / Domestic unrest; Catastrophic natural events; and System-wide communications failure

6. Planning, coordination, training and mutual aid agreements with external agencies (state, local police, FBI and other federal agencies)

7. Security SOPs reviewed on a regular basis and updates made as needed to Security Plan 8. Security equipment installed, inspected, and maintained to monitor trespass activities 9. Data collection established for all security issues / incidents; analysis performed and

recommendations made; document control established, including follow-up 10. Security risk/vulnerability assessments conducted, documented and reviewed 11. Contingency plans for loss of electrical power and radio or phone communications 12. Standard Operating Procedures for critical incident command, control, and service

continuation/ restoration 13. Security training provided to all staff levels (from front-line "eyes and ears" concept to

professional level security training) 14. Background checks on employees and contractors (where applicable) 15. Regular assessments of employee security proficiencies conducted 16. Employees issued quick reference guidelines for security situations 17. Emergency contacts list developed / current / and responsibilities for call-outs identified 18. Visitor, deliveries and contractor facility access procedures developed / visible

identification required 19. Concepts of crime prevention through environmental design (CPTED) applied in reviews

of facilities and in new design and modifications 20. Security checklists developed and regularly used for verifying status of physical

infrastructure and security procedures 21. Agency employees identifiable by visible identification and/or uniform 22. Policy and procedures in place for facilities key control

38

Page 46: o Dot Security Plan Template

Appendix D Bomb Threat Checklist and Procedures

Bomb Threat Checklist

Exact time and date of call:

Exact words of caller:

Voice Accent Manner Background Noise Loud Local Calm Factory Machines

High Pitched Foreign Rational Bedlam

Raspy Race Coherent Music

Intoxicated Not Local Deliberate Office Machines

Soft Region Righteous Mixed

Deep Angry Street Traffic

Pleasant Local Irrational Trains

Other Foreign Incoherent Animals

Raspy Race Emotional Quiet

High Pitched Not Local Laughing Voices

Loud Region Airplanes

Party Atmosphere

Language Speech Familiarity with Threatened Facility

Excellent Fast Much

Fair Distinct Some

Foul Stutter None

Good Slurred

Poor Slow

Other Distorted

Pleasant Nasal

Other Lisp

Raspy Other

39

Page 47: o Dot Security Plan Template

Questions to Ask the Caller

When is the bomb going to explode?

Where is the bomb?

What does it look like?

What kind of bomb is it?

What will cause it to explode?

Did you place the bomb?

Why did you place the bomb?

Where are you calling from?

What is your address?

What is your name?

Observations

If the voice is familiar, whom did it sound like?

Were there any background noises?

Telephone number call received at:

Person receiving call:

40

Page 48: o Dot Security Plan Template

Any additional remarks:

41

Page 49: o Dot Security Plan Template

Bomb Threat Procedures

In recent years the use and threatened use of explosives in our society has increased at an alarming rate. Organizations must prepare a plan of action to respond effectively. This brief provides guidelines that will assist transit agencies in developing a procedure specific to their particular environment.

Steps to Be Considered

When faced with a bomb threat, the primary concern must always be the safety of passengers, employees, and emergency responders. Many transit agencies already have a disaster or emergency procedure for responding to smoke, fire, or medical emergencies in stations, administrative facilities, and shops/yards. Several aspects of these procedures remain viable in a bomb threat procedure.

However, new problems must be addressed when a bomb threat is received. For example, in the instance of a fire, effort is directed at evacuating the occupants in a quick and orderly manner. In the case of a bomb threat, if evacuation is initiated, the exit routes and assembly areas should be searched prior to vacating the premises. The potential hazard remains when a building is evacuated before a search has been made. Personnel cannot safely re-occupy the building and resume normal activities until a search has been conducted. Such problems require a procedure with 7 logical steps:

Step 1: Threat Reception Step 2: Threat Evaluation Step 3: Search Procedure Step 4: Locating Unidentified Suspicious Objects Step 5: Evacuation Procedure Step 6: Re-occupation of Building Step 7: Training of Essential Personnel

Each of these steps is discussed below:

Step 1: Threat Reception

Threats are transmitted in several ways:

Telephone Threats (threat to detonate explosive is phoned into system)

Caller is the person who placed the device Caller has knowledge of who placed the device Caller wants to disrupt system operation

Written Threats (threat to detonate explosive is written into system) May be more serious than phoned-in threats

42

Page 50: o Dot Security Plan Template

Written threats are generally more difficult to trace than phoned-in threats

Letter and Package Threats (suspicious package or letter is delivered to agency)

These threats serve a variety of purposes, but, generally, they are directed at specific system personnel rather than at the system as a whole.

The personal motivations of the criminal may be more important in these types of threats

Bomb threats are normally transmitted by phone. The person receiving the call should be prepared to obtain precise information, including:

The time the call was received and on which telephone number or extension The exact words of the person making the threat should be recorded Indicate whether it was a male or female voice and an approximate age Note any accent or speech impediment or slurring of speech which could indicate intoxication or an unbalanced condition Listen for the presence of any background noises such as traffic, music, or other voices Decide if the voice is familiar The person receiving the threatening call should be prepared to ask the caller certain questions if the information has not been volunteered. Where is the bomb? When is it going to explode? What does it look like? What kind of bomb is it? Why did you place the bomb? What is your name?

The caller may provide specific information by answering these questions. Often the type of person making a threat of this nature becomes so involved that they will answer questions impulsively. Any additional information obtained will be helpful to police and explosive technicians. To assist the person receiving the call, it is suggested a printed form be readily available. A sample is provided in Appendix A. Typically, this checklist is kept readily available to the transit dispatcher or administrative personnel most likely to receive such a threat.

Written and Letter/Package Threats should be treated as “suspicious objects” (see Step 4). Step 2: Threat Evaluation

Two basic descriptions of threats can be identified:

Non-specific threat: This is the most common type of threat, usually with little information given other than, "There is a bomb in your building."

43

Page 51: o Dot Security Plan Template

Specific threat: This threat is given in more detail. Reference is often made to the exact location of the device, or the time it will detonate.

Specific threats should be considered more serious in nature, requiring a more concerted effort in the response. The non-specific threat, however, cannot be ignored. A policy must be developed to respond effectively to both threat levels.

Certain actions should be taken regardless of the threat category:

Notify law enforcement (whether internal transit police and/or security or local law enforcement) Notify management personnel Initiate the search procedure Search before evacuation of personnel (employee search) Search after evacuation of personnel (volunteer search)

Notification to internal and/or external law enforcement, security and management personnel should be prompt, and include as much detail as possible. The person who received the threatening call should be available immediately for interviewing. Copies of the completed threat checklist should be readily available to all who may need it.

The appropriate search procedure should be initiated. Searches in the transit environment – as in many other environments – have two major constraints:

Radio communication cannot be used (it may detonate the device) The environment is specialized, therefore, it cannot be searched effectively by outsiders

To address these concerns, personnel who work in a particular area, or who are responsible for an area, should be used. Not only will these personnel provide a much more thorough search than outside responders, but they are knowledgeable concerning station or facility emergency communication systems, and can access “land line” telephones to manage communications more effectively during the search. A system that utilizes the employees – after evacuations have been ordered -- should always and only use volunteers.

The following criteria help determine what immediate action to take:

Factors favoring a search before the movement of personnel (occupant search):

There is a high incidence of hoax telephone threats Effective security arrangements have been established Information in the warning is imprecise or incorrect The caller sounded intoxicated, amused, or very young The prevailing threat of terrorist activity is low

Factors favoring movement of personnel before searching (volunteer search):

44

Page 52: o Dot Security Plan Template

The area is comparatively open Information in the warning is precise as to the matters of location, a description of the device, the timing, and the motive for the attack A prevailing threat of terrorist activity is high

Step 3: Search Procedure

Pre-planning and coordination of employees are essential in implementing an effective search of transit premises, particularly for large stations and facilities. A central control mechanism is necessary to ensure a thorough and complete response. A printed station and/or facility schematic should be identified for each major transit facility. Wherever possible, stations should be divided into zones or sections (prior to the actual conduct of the search), and volunteer personnel – familiar with the zone or section – identified to support the search, by shift or position. Back-ups and supporting volunteers should also be identified for each zone or segment. A compendium of station/facility schematics should be available to those responsible for managing bomb threats and searches. Not only will these schematics support identification and assembly of the volunteer search team, but also, as the search is conducted, each area can be “crossed off” the plan as it is searched.

Areas that are accessible to the public require special attention during a search, and may be vitally important if an evacuation is to be conducted. The level of the search should be commiserate with the perceived threat level:

An occupant search is used when the threat's credibility is low. Occupants search their own areas. The search is completed quickly because occupants know their area and are most likely to notice anything unusual.

The volunteer team search is used when the threat's credibility is high. The search is very thorough and places the minimum number of personnel at risk. Evacuate the area completely, and ensure that it remains evacuated until the search is complete. Search teams will make a slow, thorough, systematic search of the area.

During the search procedure the question often arises, "What am I looking for?" The basic rule is: Look for something that does not belong, or is out of the ordinary, or out of place. Conduct the search quickly, yet thoroughly, keeping the search time to a maximum of 15 to 20 minutes. Both the interior and exterior of the station or facility should be searched.

45

Page 53: o Dot Security Plan Template

Historically, the following areas have been used to conceal explosive or hoax devices in the transit environment:

Outside Station Areas Inside Stations

Trash cans Dumpsters Mailboxes Bushes Street drainage systems Storage areas Parked cars Shrubbery Newspaper Stands

Ceilings with removable panels Overhead nooks Areas behind artwork, sculptures and benches Recently repaired/patched segments of walls, floors, or ceilings Elevator shafts Restrooms Behind access doors In crawl spaces Behind electrical fixtures In storage areas and utility rooms Trash receptacles Mail rooms Fire hose racks

Depending on the nature of the threat, searches may expand to include transit vehicles. In extremely rare instances, dispatchers have instructed operators on certain bus routes or rail lines to immediately bring their vehicles to a safe location, deboard passengers, and walk-through the vehicle – looking for unidentified packages. In other instances, evacuated vehicles have been met by law enforcement officers, who actually conduct the search, including the vehicle undercarriage and rooftop areas.

Step 4: Locating an Unidentified Suspicious Package

If an unidentified or suspicious object is found, all personnel should be instructed (1) not to move it and (2) to report it to central dispatch or the search team leader immediately. The following information is essential:

Location of the object Reason(s) suspected Description of the object Any other useful information – how difficult to secure area, evacuate, nearest emergency exits, etc.

Based on this information, decisions will be made regarding the following:

Removal of persons at risk Establishment of perimeter control of the area to ensure that no one approaches or attempts to move the object

46

Page 54: o Dot Security Plan Template

Activities to establish ownership of the object. (In the event that legitimate property has been left behind in error prior to the bomb threat being received.) Assignment of someone familiar with the building and the area where the object is located to meet the Explosives Disposal Unit personnel on their arrival (in the event that they have been called) Continue implementation of search procedure until all areas have reported to the central control, as there may be more than one unidentified object

While volunteers and public safety personnel are conducting the search, and particularly while they are managing response to a suspicious package, they should keep in mind the following information:

Improvised Explosive Devices (IEDs) and other types of bombs inflict casualties in a variety of ways, including the following:

Blast over pressure (a crushing action on vital components of the body; eardrums are the most vulnerable).

Falling structural material. Flying debris (especially glass). Asphyxiation (lack of oxygen). Sudden body translation against rigid barriers or objects (being picked up and thrown

by a pressure wave). Bomb fragments. Burns from incendiary devices or fires resulting from blast damage. Inhalation of toxic fumes resulting from fires.

The following are four general rules to follow to avoid injury from an IED:

Move as far from a suspicious object as possible without being in further danger from other hazards such as traffic or secondary sources of explosion

Stay out of the object's line-of-sight, thereby reducing the hazard of injury because of direct fragmentation

Keep away from glass windows or other materials that could become flying debris

Remain alert for additional or secondary explosive devices in the immediate area, especially if the existence of a bomb-threat evacuation assembly area has been highly publicized

Historically, perpetrators of bombings in the transit environment (in foreign countries such as Israel, France, India, and England) have used two tactics that intensify the magnitude of casualties inflicted by detonation of an explosive device:

47

Page 55: o Dot Security Plan Template

Perpetrators have detonated a small device to bring public safety personnel to the site; a larger, more deadly device has detonated some time after the first device, thereby inflicting a large number of casualties on the first responder community.

Perpetrators have used a real or simulated device to force the evacuation of a facility only to detonate a much more substantial device in identified bomb-threat evacuation assembly areas. These attacks are especially harmful because the evacuation assembly areas often concentrate transit personnel and passengers more densely than would otherwise be the case.

Step 5: Evacuation Procedure

If an unidentified object is found, a quiet and systematic evacuation from the area should be conducted. Prior to evacuation, all areas used in the evacuation route must be searched: stairwells, corridors, elevators, and doorways. When these areas have been checked, volunteer personnel should be assigned to direct other personnel along the searched exit routes.

As a general guideline, evacuation should be to a minimum distance of 300 feet in all directions from the suspicious package, including the area above and below the site, giving regard to the type of building construction (thin walls, glass) and the size of the suspicious package. Elevators should not be used to evacuate people under normal circumstances. A power failure could leave them trapped in a hazardous area. Attention should be paid to the need for special transportation requirements of persons with disabilities.

The essential task in evacuation procedures is to direct people to quietly leave the premises, using tact and power of suggestion, in an effort to maintain control and avoid panic. Once a complete or partial evacuation has taken place, there must be some form of accounting for all personnel. This may be a difficult task, but a necessary one to ensure the safety of all personnel.

Assembly areas should be pre-selected and well known to personnel. Establish a clearly defined procedure for controlling, marshalling, and checking personnel within the assembly area. If possible, for major transit stations, assembly areas should be coordinated with local police in advance. Assembly areas are selected using the following criteria:

Locate assembly areas at least 300 feet from the likely target or building (if possible).

Locate assembly areas in areas where there is little chance of an IED being hidden. Open spaces are best. Avoid parking areas because IEDs can be easily hidden in vehicles.

Select alternate assembly areas to reduce the likelihood of ambush with a second device or small-arms fire. If possible, search the assembly area before personnel occupy the space.

48

Page 56: o Dot Security Plan Template

Avoid locating assembly areas near expanses of plate glass or windows. Blast effects can cause windows to be sucked outward rather than blown inward.

Select multiple assembly areas (if possible) to reduce the concentration of key personnel. Drill and exercise personnel to go to different assembly areas to avoid developing an evacuation and emergency pattern that can be used by perpetrators to attack identifiable key personnel.

Step 6: Re-Occupation of Station/Facility

Re-occupation of the building is a decision that must be made by an appropriate transit agency or law enforcement official. If the evacuation was made without a search, the premises should be searched before re-occupation. Step 7: Training

Any effective threat procedure must be accompanied with an adequate training program. Training the essential personnel should encompass both the preventative and operational aspects of the procedure. Prevention can be accomplished through employee awareness, developing good housekeeping habits, and being on the alert for suspicious items and persons. Operational training may include lectures by transit police and security instructional staff or guest speakers, in-service training classes, and practical training exercises. Evacuation and search drills should be performed periodically under the supervision of transit police or local law enforcement. Coordination with local law enforcement is particularly important for those small agencies with no internal security.

Conclusion

Considering recent events, it is advisable to consider all threats serious. A well-prepared and rehearsed plan will ensure an effective, quick search with minimal disruption of normal operation. Panic and possible tragedy can be avoided. Appropriate security, heightened employee and passenger awareness, and good housekeeping controls will identify many potential problems.

49

Page 57: o Dot Security Plan Template

Appendix E Sample Emergency Telephone Directory

YUBA COUNTY:Emergency Services (OES): 741-6254/6255Sheriff/Coroner: 911/741-6331Marysville Police: 741-6621Wheatland Police: 633-2821Health Dept.: 741-6366Animal Control: 741-6478Mental Health Services 822-7200Crisis Line: 673-8255

SUTTER COUNTY:

Emergency Services (OES) 822-7370Sheriff/Coroner: 911/822-7307Yuba City Police: 822-4661Health Dept.: 822-7225Animal Shelter: 822-7375Mental Health Services 822-7200

Crisis Line: 673-8255

MEDICAL CENTERS:

Rideout Emergency: 749-4511/4300Peachtree Clinic: 749-3242Sutter Co. Med. Clinic: 822-7215DelNorte Clinic: 743-4611Mental Health Services: 822-7200Crisis Line: 673-9255

50

Page 58: o Dot Security Plan Template

Appendix F Sample Types of Exercises

Experience shows that exercises are the most practical, efficient, and cost effective way to prepare for disasters and crises. The aim for any transit agency should be to develop a progressive exercise program, a long-term approach in which exercises are planned, conducted, and evaluated as building blocks to competency in crisis management.

There are two principal benefits of such a program. First, people practice their role and gain proficiency in crisis management. Second, the coordination among transit providers and local emergency response agencies is improved. These benefits arise not from exercising alone, but from evaluating the exercise and acting upon those results. An exercise has value only when it leads to individual and/or collective improvement.

Key terms used in the development of exercises include the following:

Progressive Exercise Program: A commitment from the transit provider and community public safety agencies to plan and conduct increasingly more challenging exercises over a period of time, to achieve and maintain competency in executing the local crisis management plan.

Objective: A goal expressed in simple, clear, specific, and measurable terms. Serves as the foundation of all exercise planning.

Scenario: The overall outline of how an exercise will be conducted. Includes the narrative, major/detailed sequence of events, problems or messages, and expected actions. Often used interchangeably with the term narrative.

Narrative: A word “picture” that includes all essential elements of information concerning the incident used to initiate an exercise.

Types of exercises include the following:

Drill: Supervised activities that test, develop, or maintain skills in a single response procedure (such as: communications, notification, lockdown, fire) and the possible or probable interaction with local government agency functions (such as: incident command posts, rescue squad entry, police perimeter control) which will involve actual field response. Helps prepare for more complex exercises in which several functions are coordinated and tested.

Exercise An activity designed to: promote emergency preparedness; test or evaluate emergency operations, policies, plans, procedures or facilities, train personnel in emergency duties, and demonstrate operational capabilities. Full-Scale Exercise: Evaluates the operational capability of emergency response management systems in an interactive manner. Includes the mobilization of emergency

51

Page 59: o Dot Security Plan Template

personnel and resources required to demonstrate coordination and response capability. Tests total response capability as close to a real emergency as possible.

Functional Exercise: A fully simulated interactive exercise; tests one or more functions in a time-pressured realistic simulation; focuses on policies, procedures, roles, and responsibilities.

Orientation Seminar: An informal discussion designed to familiarize participants with roles, plans, procedures, and resolve questions of coordination and assignment of responsibilities.

Tabletop Exercise: Simulates an emergency situation in an informal, stress-free environment. Designed to elicit discussion as participants examine and resolve problems based on existing crisis management plans.

52

Page 60: o Dot Security Plan Template

Appendix G Reporting Criminal Activity

If you observe a crime in progress or behavior that you suspect is criminal, immediately notify [dispatch or local police]. Report as much information as possible including:

Activity: What is happening? (In plain language and with as few assumptions as possible)

Description of Involved People: For each involved person, provide:

Height Weight Gender Clothing Weapons Distinguishing characteristics

Location: Describe exactly where the criminal activity is occurring. If the activity is “moving,” describe the direction of travel.

Vehicle: If a vehicle is involved, please provide the following:

Color Year Make Model License

DO NOT APPROACH OR ATTEMPT TO APPREHEND THE PERSON(S) INVOLVED.

Stay on the telephone with the police dispatcher and provide additional information as changes in the situation occur, until the first police officer arrives at your location.

53

Page 61: o Dot Security Plan Template

Appendix H Emergency Action Plan

        

COMPANY:

ADDRESS:         

54

Page 62: o Dot Security Plan Template

I. EMERGENCY PLAN COORDINATOR 

NAME:

TITLE:

DEPARTMENT: 

TELEPHONE NO:  II. PREFERRED MEANS OF REPORTING FIRES AND OTHER EMERGENCIES 

Type of Emergency:

Reported By:

Fire 

Explosion 

Tornado/Weather 

Bomb Threat 

Chemical Spill/Leak 

Violence

Medical 

Other  

ELEMENTS A. Emergency Escape Procedures and Routes

Emergency escape procedures and route assignments have been posted in each work area, and all employees have been trained by designated supervisors in the correct procedures to follow. New employees are trained when assigned to a work area. A sample escape procedure and escape route sheet of the type posted in work areas should be developed. (Identify and attach floor plan and escape route).

55

Page 63: o Dot Security Plan Template

B. Procedure for Employees Who Remain to Operate Critical Operations Before They Evacuate:

 A single procedure should be developed that describes operations, procedures,

and personnel required in order for critical operations to be performed before the assigned personnel evacuate during emergency situations. A description of the special training provided should also be included. C. Employee Accountability Procedures after Evacuations

Each supervisor is responsible for accounting for all assigned employees, personally or through a designee, by having all such employees report to a predetermined designated rally point and conducting a head count. Each assigned employee must be accounted for by name. All supervisors are required to report their head count (by name) to the Emergency Evacuation Coordinator.  D. Rescue and Medical Duties 

Specific rescue and medical duties have been assigned to designated individuals. These personnel have received special training and instructions for properly carrying out these assignments.  E. Alarm System

Alarm systems for notifying all employees in case of an emergency are: 

When so required by specific OSHA Standards, the organization will comply with OSHA Standard 1910.165, Employee Alarm Systems.  F. Training 

The following personnel have been trained to assist in the safe and orderly emergency evacuation of other employees. (See also Appendix B-identify)

Name Title Work Area Special Assignment  

 

 

 

1. Training is provided for employees when:2. The plan was initiated3. Responsibilities change

56

Page 64: o Dot Security Plan Template

4. New employees are hired or transferred III. EMERGENCY SHUTDOWN PROCEDURES

During some emergency situations, it will be necessary for some specifically assigned and properly trained employees to remain in work areas that are being evacuated long enough to perform critical operations. These assignments are necessary to ensure proper emergency control. 

Assignments 

Work Area Name Job Title Description of Assignment

 IV. SPECIAL TRAINING 

The preceding individuals have received special instructions and training by their immediate supervisors to ensure their safety in carrying out the designated assignments. A training record describing the instructions provided and the detailed procedures to be followed is maintained in the Emergency Plan and Fire Protection Plan Coordinator’s Office. 

Emergency and Fire Protection Plan Coordinator: 

Name: Date:

 V.  EMPLOYEE ACCOUNTABILITY PROCEDURES FOLLOWING AN

EMERGENCY EVACUATION 

Each supervisor is responsible for accounting for each assigned employee following an emergency evacuation. This will be accomplished by performing the procedures established for such an eventuality. VI. EMPLOYEE ACCOUNTABILITY 

1. Rally points have been established for all evacuation routes and procedures. These points are designated on each posted work area escape route.

57

Page 65: o Dot Security Plan Template

2. All work area supervisors and employees must report to their designated rally points immediately following an evacuation.

3. Each employee is responsible for reporting to his or her supervisor so that an accurate head count can be made. Supervisors will check off the names of all those reporting and will report those not checked off as missing to the Emergency Evacuation Coordinator.

4. The Emergency Evacuation Coordinator will be located at one of the following locations:

 A. Primary Location: B. Secondary Location:

 5. The Emergency Evacuation Coordinator will determine the method to be

utilized to locate missing personnel. VII. RESCUE AND MEDICAL DUTIES 

It may become necessary in an emergency to rescue personnel and perform some specified medical duties, including first-aid treatment. All employees assigned to perform such duties will have been properly trained and equipped to carry out their assigned responsibilities properly and safely.

Assignments 

Special SpecialName Location Assignment Training Provided

58

Page 66: o Dot Security Plan Template

Special Instructions and Procedures 

All personnel performing emergency rescue and medical duties must follow these instructions:

59